Re: [c-nsp] Port-channel configuration "stickiness"...

Hi, > Known bug? Feature? You can alter a port-channel configuration and > expect it to propagate to the members, correct? yes - changes to the port-channel are propagated to the members... if you do it the other way around then the interface WONT match the port-channel and the link will go d

Re: [c-nsp] Confirmation of Gigabit Ethernet autonegotiation behavior

Hi, > Actually you can. :-) IEEE 802.3 claus 37.2.1.3 describes half duplex > for 1000BASE-X. It doesn't make a lot of operational sense, but it's > possible. ...you can have one repeater per collision domain ...sure...but then wheres your performance gone. proper cables and proper kit ;-) ala

Re: [c-nsp] Switch lights rapid blinking

Hi, > Can someone please point me in the right direction to correct this issue.  I > came into a network that is using the default vlan and for about 2 weeks now, > every switch and port is rapidly blinking.  I looked at wireshark and don't > seen anything out of the ordinary.  I also checked fo

Re: [c-nsp] Switch lights rapid blinking

Hi, > Alan, there are many normal things that can cause this, like ARP broadcast, > unknown unicast especially in a large flat nets. as I said, it could be the usual blinking...they do blink a lot even in a test/lab environment... and checking whats going on on uplink might be key for flat netwo

Re: [c-nsp] Switch lights rapid blinking

Hi, > Yep, every port is in the default vlan until I'm allowed to make changes and > split this large broadcast domain into vlans. I woulnt call a /16 with only 200 hosts a large broadcast domain.. I know of several institutions (and their poor network admin) who have thousands of hosts in a fl

Re: [c-nsp] unknown interface for ipv6 route in 4.2.3

Hi, > This... is amazing. And then people complain that a /64 is too big for > a single LAN. > > I'd expect more bugs and unexpected behaviour - implementations get tested > with "LAN = /64", and sometimes with "/112" or "/124", but I'd expect > most interesting results for connected networks wi

Re: [c-nsp] How important is the HW revision of a module?

Hi, > How concerned should I be about the HW and FW revisions? 2.2 to 4.3 seems > pretty far apart. I think the Hw isnt a problem - its usually a slightly different PCB layout, new ASIC, different capacitors etc. if there was a hardware fault then that would be VERY interesting for customers w

Re: [c-nsp] Cisco Asset Discovery Open source Tool

Hi, > Any of you knows an open source toll which will help us to discover > the Cisco asset details through SNMP or Telnet also help us to > track the AMC and generate alerts . a list of different requirements of which some tools can do and some cant. try RANCID and NetDISCO as starting points

Re: [c-nsp] 1.1.1.0/24 and Cisco WLCs

Hi, > Maybe. But a lot of people *have* used it, because I've seen it when > doing webauth logins e.g. in airports, train networks, etc. And by > definition, the people unwise enough to use it are also likely to be > the people unwise enough to return and fix things up in the > installations they

Re: [c-nsp] Inventory Control

Hi, > > Hi allIs there an open source inventory control tool ? NetDISCO alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] VS-S2T-10G card with WS-X6748-SFP Card => DFC Problems

Hi, > Is it correct that DFC4s are field upgradeable? depends on the card. cisco document where your money will be spent. alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puc

Re: [c-nsp] Rancid causing reload SUP2T 12.2.50-SY3

Hi, ...just wondering why its doing 'write term' at the endthat used to cause issues a while back on the old sup2's alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.

Re: [c-nsp] Cisco Wireless VOIP IP phone issue

Hi, > Does anyone know if there is a way to make a IP Phone update it's > access-point more often? We're having an issue where traveling between two > access points while on a call doesn't seem to poll for the strongest > wireless signal often enough. The symptoms include bi-directional voice > is

Re: [c-nsp] 3750 stack "inaccessible" - memory leak

Hi, > Each time my patience wears thin with TAC, I come here; it's typically > more productive :) > February 2011: 3750G stack stops answering to telnet/ssh with timeouts, > serial console reports "%% Low on memory; try again later". > Gets blamed on CSCsu27706, fixed in 12.2(44); but we're now o

Re: [c-nsp] EEM applet for Vlan for switches

Hi, > Does anyone has idea or suggestion that which command is used on Switches to > write EEM applet through Cisco IOS Cli as the above mentioned command is not > working on switches. What is the syntax?? WHAT switches are you dealing with as many dont have any EEM ability alan __

Re: [c-nsp] InfoBlox

Hi, > My thoughts are that this group is very knowledgeable about all networking > topics and it makes sense to me this group works because its a forum dedicated to a particular vendor and specific remit. the SnR is pretty good and you get answers because its a specific group FOR that purpose. i

Re: [c-nsp] ASR9k Too Frequent Update on Rancid

Hi, > We have recently added a new ASR9k into the nerwork. Prior to this we have > other routers running IOS XR namely CRS. > Being IOS XR the config in Rancid are the same for the CRS and also the > ASR9k, however the ASR9k has been "chatty" reporting changes as shown below > but not the CRS

Re: [c-nsp] Cisco 6500 mounting with cables

Hi, > We ran cables left and right, but all servers was channel bonded > (split between left & right), so we could remove all cables required > and replace the fan tray without any disruption. Took a ton of work > though :-( we have VSS pairs so the remote links are dual linked (or more) to each

Re: [c-nsp] Cisco trunk port startup delay

Hi, > > * I am definitely not disabling spanning-tree. I have enabled 'portfast > > trunk' on the port which reduced the port uptime significantly. > > * Disabling a lot of negotiation protocols improves port initialization > > time as well spanning-tree portfast trunk switchport nonegotiate (tha

Re: [c-nsp] Multi-Vendor CAPWAP AP Interop Using Cisco 5508 WLC

Hi, > Can anybody tell me if this is still the current state of CAPWAP? > Has anybody seen or had experience running a multi-vendor AP deployment using > Cisco WLC's ? I havent seen any cross-vendor wireless solution using CAPWAP 'standard' at all. let alone working on cisco controllers... (gi

Re: [c-nsp] Meraki? is anyone there testing it?

Hi, > I just saw a service/product line from Cisco called Meraki. > Looks promising but... considering how everything is getting mad with > Snowden revelations... does it make sense to manage the network with a > cloud app? further more, Meraki availability is just based on "link" > to internet, n

Re: [c-nsp] PRTG OR ZABBIX MONITORING TOOL what is your opinion

Hi, > NAGIOS needs a lot of tunning to be useful, I think, a serious NAGIOS > deployment with several devices and/or changes on the network (as for > example probes for several SLAs...) needs someone dedicated to > maintain it with some experience. depends on how you do things. most of our NAGIOS

Re: [c-nsp] Input Errors And CRC Errors

Hi, > Trying to diagnose a problem on a 6509 chasis, port showing input and CRC > errors on one end of the link. The link is a Tengigabit > I'me going to try the follwing: > Change fibre clean/check fibre first. ensure its the right type of fibre for the link length and media converter type >

Re: [c-nsp] cisco 4400 wireless lan controller (4402)

Hi, > I have a customer that has one of these and it's rebooting over and over > again > > you know anything about that ? what version of software is it running? alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailma

Re: [c-nsp] Cisco IPSec VPN's (Tunnel Interfaces) migrating from 12.2.25 to 15.1.4

Hi, > I'd be surprised if something didn't migrate over automatically. IOS will > accept older style commands, and upon parsing them, changed them to the new > format itself. You sure you're not running 12.4(25)? I don't think 2800s if the configuration format is deprecated then you can get th

[c-nsp] debug on?

hi, wonder what the cisco engineers have done with the sup2T image compilation - 15.1(1)SY1 weighed in just shy of 100MB, 15.2(2)SY however is jusy shy of 120MB - thats 20MB of either debugging etc ;eft on or I'll have to guess that the new 6500 IA feature takes on 20MB of codebase?? :| it does

Re: [c-nsp] C6K, SUP720, 15.1SY

Hi, > We are running into some possible CEF bugs, and the response we are getting > from TAC is "15.1SY is buggy, you should be running 12.2SX." thats poor. we've had simialr for other devices. I point them to the open caveats for the older version and the fact we were exposed to those bugs - and

Re: [c-nsp] 6500 IOS recommendation?

Hi, > Are people actually upgrading to 15.1SSY, or just running late > 12.2(33)SXI or SXJ until these boxes run out of resources? 15.1 SY1 and 15.2 - having a look at the resolved caveats its a wonder they ran at all on earlier releases ;-) alan ___ ci

Re: [c-nsp] Spanning-tree ports cost Formula

Hi, > What is the formula to assign a value of 19 to FE interfaces and other values > to other interfaces? cisco docs are searchable via google: http://www.cisco.com/en/US/tech/tk389/tk621/technologies_configuration_example09186a008009467c.shtml of course, C

Re: [c-nsp] Spanning-tree ports cost Formula

Hi, >I think what he is asking for is how try the values were extracted they are just default values for different interface types. I dont recall there being any formula (unlike eg OSPF/EIGRP calculations on links). cant recall if its CCNA or CCNP SWITCH level stuff: Spanning tree port cost

Re: [c-nsp] Spanning-tree ports cost Formula

Hi, > The newer versions of the STP standards (802.1D udpdated and 802.1W/S) > have updated path cost values to cover higher speeds. a-ha! thanks for that - and the link! much appreciated...the ammo I need :-) alan ___ cisco-nsp mailing list cisco-ns

Re: [c-nsp] How to prevent https facebook from the cisco router 1841

Hi, > i need to prevent users to open Facebook https traffic from my router cisco > 1841 you will need to invest in other technology that can achieve this...and wonder why you dont get the best people working for your company. blocking facebook isnt a technical issue...its a human resource issu

Re: [c-nsp] Weird problem with 2960S and desktop switch

Hi, if the burnt in MAC address is lower then it will take overso i guess the new switch has a higher mac address than your switch. alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive

Re: [c-nsp] NTP DDoS

Hi, > Yeah, but I didn't mean for you to make that public :( ...all the info about open NTP servers on the (IPv4) internet is public and open now - has been since peopel started scanning for it... just waiting for the patient ones to start listing IPv6 NTP systems that can be hit *exactly* the s

Re: [c-nsp] Need suggestion on cisco 3560 sw IOS

Hi, > Request to suggest whether 12.2(58)SE or 12.2(55)SE , a stable IOS for > Cisco 3560-24TS switch since the switch got a software crash installed > with 12.2(52)SE. can you even GET 12.2(58)SE for that 3560-24TS switch? why not use/check the cisco IOS software download page? they suggest 12

Re: [c-nsp] Need suggestion on cisco 3560 sw IOS

Hi, > Also the OP should note that when you boot from from 12.2(52)SE to a later > versions, the boot loader will almost do a microcode upgrade on the C3560X > platform. Depending on the version involved, this can take up to 35 minutes > downtime per box. The release notes still don't mention thi

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, > Do you know any devices to provide galvanic isolation for twisted pair > Ethernet? > > We have regular Ethernet surge protection devices (AFAIK APC) between > the switch and the attached equipment but they don't help. This is the > second Catalyst already with a burnt group of ports. what

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, should never run copper for networks between buildings (and some would say ever outside buildings) - thats optic territory. we use optical isolation...but if you really want to protect your ports maybe these will help: http://datainterfaces.com/surge-protectors.aspx (if anyone else has e

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, > > http://datainterfaces.com/surge-protectors.aspx > > They do not seem to offer galvanic isolation, I think they use gas > discharge modules. How do I know they are any better than those we > already have (APC ProtectNet)? I dont. they are a choice thats out there - and define your 'galvan

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, > The choice is really big, Google gives many vendors and a wide range > of models of Ethernet protectors. yesso why did you originally ask about them? ;-) > Well, er, http://en.wikipedia.org/wiki/Galvanic_isolation ;-) yes, I believe in wikipedia. sorry, the term is not one I was famil

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, > This seems to be the one we are already using (however not a > rackmounted variant, but standalone devices like the white thingie on > the left of the picture) and they are not helping. this one: http://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=PNET1GB I think i'd

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, > You can run copper between buildings in underground or aboveground conduits, > if they're properly shielded - but it isn't a good idea due to RFI, etc. yes - thats how most POTS/PBX systems work after all - but recall all the lovely noises/artifacts etc that are the result of grounding pr

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, > Because I hoped to find someone already using them and ready to give > positive or negative feedback about certain models. ah! > It's not like there is some backbone running between buildings as one > might imagine. It's just perimeter protection devices and cameras, and > an occasional da

Re: [c-nsp] Galvanic isolation for Ethernet?

Hi, > > yes - I can imagine the picture quite clearly. > > Can you imagine using optical fiber in this picture (unless the > devices were equipped with fiber ports)? you say there is no PoE? in which case yes, mini switches with fibre/SFP uplinks :-) (powered locally as per your current device

Re: [c-nsp] Removing An Interface from a Port Channel

Hi, > I have a trunk with 4 interfaces what is the quickest way to remove ONE > interface from the Port channel?, is the command Default interface gi x/y/z > adequate?. > Thanks in advance. A colleague of mine removed an interface recently from a > port channel and the interface retained the

Re: [c-nsp] #SSID / resource usage

Hi, > Is there a relation between the number of used SSID and used reources > (system/network/...) ? yes. physics is not a nice master ;-) e.g. http://www.revolutionwifi.net/2013/10/ssid-overhead-how-many-wi-fi-ssids-are.html alan ___ cisco-nsp maili

Re: [c-nsp] Full Duplex

Hi, > Hi all , we were arguing about the full duplex FE interface and it's speedIs > it true that this interface can handle 100Mbps send and 100Mbps receive at > the same time? like it is 200Mbps ? sort of :-) yes, its 100mbit in both directions - so in theory you can be uploading and download

Re: [c-nsp] Port Channel Speed

Hi, > WE have a port channel on NX 5548 connected to Cisco FI. There are two 10Gb > interface are bounded to it. your bandwidth on that port-channel is 20G... but the biggest flow supported is 10G - the Physical limit. alan ___ cisco-nsp mailing list

Re: [c-nsp] "New" IOS release time frame, when bug is identified

Hi, > Ive unfortunately uncovered a bug on the ME3600, and Cisco are recommending I > wait until IOS version with fix is released...problem is that they have given > me a date of 30th September 2015 for the release date! sounds typical. depending on what support contract you have and how you l

[c-nsp] GRE tunnel 8000kbit (8Mbit) limit issue

hi, okay...have googled and looked around...and no current joy. we have a GRE tunnel between a 6506 (sup2T) running IOS 15.1 and a 3750 running IOS 15.2 both ends report the tunnel interface as having the following details/limits Tunnel TTL 255, Fast tunneling enabled Path MTU Discovery,

Re: [c-nsp] GRE tunnel 8000kbit (8Mbit) limit issue

Hi, > > we have a GRE tunnel between a 6506 (sup2T) running IOS 15.1 and a 3750 > > running IOS 15.2 > > 3750 doesn’t support GRE, you’re hitting limitation of the platform. > It’s miracle it works - mostly propably, because it hits software > forwarding path, and even if it’s not supported, it

Re: [c-nsp] GRE tunnel 8000kbit (8Mbit) limit issue

Hi, > we have a GRE tunnel between a 6506 (sup2T) running IOS 15.1 and a 3750 > running IOS 15.2 just to correct my shoddy problem statement, its s 6506E chassis with Sup2T and a 3750x (12s)(though more googling finds statement of no official support for GRE even on 3750-X or that it cann

Re: [c-nsp] Poor speed through GRE tunnel

Hi, > (And occasionally talk to your colleagues) ;-) we worked long yesterday...and at the end of the day had discussions about next steps and where we could ask for advice... i went home and sent the email to c-nsp and , since I'm at a remote site this morning we didnt get chance to catch-up o

Re: [c-nsp] dai / dhcp snooping bug

Hi, > I've just now discovered a cli command - 'ip dhcp snooping binging > ' - which allows me to directly inject the needed information. > This would solve my short term problem and let me get back to a > reasonably well populated dhcp snooping table, but the question > becomes, is this going

Re: [c-nsp] LACP Fast

Hi, > I have LACP fast enabled on various port channels. I would like to revert > back to default timers. Is it right that I need to delete the port channel > first?, then remove the LACP fast from each interface in the port channel. I > will be doing this in the lab, any help appreciated. i

Re: [c-nsp] 1 or 2 port Console/Ethernet server

Hi, > Looking for recommendations on small 1 or 2 port ethernet-serial terminal > server. > Preferably one with some security on it, and that allows us to ssh direct to > the serial port. > Power control would be an added bonus but not mandatory. OpenGear - offer you many ways to access the s

Re: [c-nsp] Cache DNS servers

Hi, > I have little question about DNS servers that you use in your environment? > We use bind on freebsd servers now. I did some benchmarks and found that > google public DNS is 8 - 10 time faster than my own. So I decide change BIND > for something more faster. I'm in MNO market. Any suggestion

[c-nsp] Issue with Cisco 1000v Nexus in VSphere 6

hi, We are trying to deploy the Nexus 1000v to our VM environment but are coming across an issue we cannot seem to resolve. We have deployed the 1000v (via template) and configured port-profiles, have managed to add the 1000v to vSphere 6 and established communications between the two. The is

Re: [c-nsp] cat 6800 performance mode

Hi, > What I can tell you is that 100Gbps ports are planned for late 2016, but > only for the 6807 chassis. The 6800 will not get this support. there are things out there and I cant just blurtstuff out...chat with your Cisco SE - I'm sure they can run you through some slides showing new things c

Re: [c-nsp] Interface drops

Hi, > Now, 14482944 of 548164331323 packets is a mere 0.002%... Hence - should > this be a cause of concern? well yes - that amount of drops leads to huge hit in network performance for eg TCP applications https://fasterdata.es.net/network-tuning/tcp-issues-explained/packet-loss/ > > #sh int

Re: [c-nsp] TX low alarm warning

Hi, > For some reason especially on 4500X 3.7 code we have also seen this message > on ports which are left no shut, and they have an SFP in it. It was > seriously polluting our logs so we wrote this: +1 > logging discriminator LOGFILTER mnemonics drops > SFF8472-5-THRESHOLD_VIOLATION > logging

Re: [c-nsp] Link encryption and scalability kit etc

Hi, ask/verify with the WAN/ISP provider that they are handling ethertypes od 0x888a and 0x88e5 (these are the minimal extras - EAPOL and MACSEC respectively) - and not just handling 0x800 and 0x86DD (and maybe one or two others) - loads appear to not carry any other tags (stops eg appletalk, D

Re: [c-nsp] err-disable state on a cisco 3750 catalyst

Hi, > Jul 12 17:30:36.218: %PM-4-ERR_DISABLE: channel-misconfig error detected on > Gi1/0/1, putting Gi1/0/1 in err-disable state so...what is the cause of this. check the config of gi1/0/1, ensure it matches the methods/speed etc of other members of the port-channel etc its been assigned to >

Re: [c-nsp] AAA-3-BADLIST

Hi, > Hello, > > I m getting the following on one of our production routers. > > %AAA-3-BADLIST: invalid list AAA ID 4190791 -Process= "SSH Process" Error Message%AAA-3-BADLIST: invalid list AAA ID %u ExplanationAn AAA client has provided an invalid attribute list to AAA. Recommended A

Re: [c-nsp] 3650 multi gig

Hi, > Anyone have a 3650 Multi gig switch? > > Which ports are multi gig? depends on the model...8 or 12 ports - they are clearly labelled - you can see the info in cisco docs or the images of them on cisco.com alan ___ cisco-nsp mailing list cisco-n

Re: [c-nsp] C3850 and NAT

Hi, > What about support of pim sparse, bgp and bfd as well on nexus 12 k$? they are supported alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cis

Re: [c-nsp] 3750 Stack Auto Upgrade

Hi, > Has anyone one successfully upgraded stacks with the auto upgrade feature?. > If a member of a stack failed it would be nice if when replacing the failed > unit it would be automatically upgraded from the master. When I say upgraded > I mean the IOS and the configuration, is this possible

Re: [c-nsp] 3750 Stack Auto Upgrade

Hi, > Thanks Alan,, > Do you have any documentation on how to do it?...maybe you could point me in > the direction. Alan so you can number a switch before adding to a stack?. official cisco docs: eg "Switch Stack Membership" http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750e_3560e/

Re: [c-nsp] Feedback on: Security Advice for Routers and Switches

Hi, > Here's the draft document: > http://www.opus1.com/www/whitepapers/securityroutersswitches.pdf > > Any and all feedback is welcome! not too bad! ..just as i was about to start writing something you appeared to miss when talking about switch port settings, you came along in a later sli

[c-nsp] RELATED: Feedback on: Security Advice for Routers and Switches

hi, related to this issue - and raised by myself as an option regarding securing the network. I have been checking out some of the L2 isolation methods and the obvious is 'port protected' so, I turned it on, et voila, hosts on the same switch can no longer talk to each other. if i use Host A and

Re: [c-nsp] RELATED: Feedback on: Security Advice for Routers and Switches

Hi, > Alan, > > Did you try to disable ICMP redirects? (no ip redirects on the VLAN > interface)? ip local-proxy-arp seems to be the beast . can anyone disuade? with this, coupled with DAI and a better L3 ACL on the VLAN you should be able to block any nefarious L3 attacks whilst reporting the

Re: [c-nsp] how To connect and trunking one 2950G-24 with a Foundry Serveriron XL

Hi, > On 6/20/07, Juan C. Crespo R. <[EMAIL PROTECTED]> wrote: > > > Does any one of you knows how to connect and trunk one Catalyst 2950 > > with one Foundry XL throught the Gigabit ports? > > Not sure what problem you're having, but if link isn't coming up at > all, try "speed nonegotiate"

Re: [c-nsp] Replacing Catalyst 4507 with Catalyst 6509

Hi, > but from this point i wasn't able to search for the same feature set on 6500 > platform, any help? my initial thought would be advanced_ipservices alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

Re: [c-nsp] Few questions regarding fixed vs modular and when which is better.

Hi, > The only problem with the 4948 is it's price point with 10G it's > 15K. The 3750E's are much more reasonable you can mount the > switch and RPS in 1U if you use the front and back rails this is a good point. the 3750E also gives you the dual-SFP adapter option which can then be

Re: [c-nsp] 6513s and 6700 series blades

Hi, > I have been told by our Cisco SE that the 6748 blade will not function > in blades 1-8, but I wanted to confirm whether that was true. The why would they lie to you? you can read from the horses mouth if you really want to eg http://www.cisco.com/univercd/cc/td/doc/solution/dcidg21.pdf

Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

Hi, > Lastest one running SXH1. No problems so far with FWSM, ACE and 6748s. we've got a 12.2(33)SXH3 box up and alive now - so far so much better than SXH2 (and 2b) but we've yet to drive packets through in anger. certainly looks like we might be SXH'd by the new year (but dont quote me on tha

Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

Hi, >> we've got a 12.2(33)SXH3 box up and alive now - so far so much >> better than SXH2 (and 2b) but we've yet to drive packets through >> in anger. certainly looks like we might be SXH'd by the new year >> (but dont quote me on that! ;-) ) > > Just don't try and "scp" anything from it... 8-)

Re: [c-nsp] Crash bug in SXH3

Hi, > times without problems) so we have reverted to SXF6 while awaiting a > new SXH build. any reason for an SXF6 so old? eg why not SXF12 ? alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] Dashboard Network Monitoring Software

Hi, > Is anyone out there using Zenoss for network monitoring? How do you like it? I worry that I find myself spending too long trying to get a huge variety of monitoring systems actually working - and then configured to work properly and 'look nice' or be usable by our local community (eg usin

Re: [c-nsp] IPv6 Subnetting - Service Provider

Hi, > yet. There's an RFC or something out there (too lazy to look it up) that > says use /64 for subnets, so it's the magic number for a lot of IPv6 > implementations. my initial (and, i guess, current) IPv6 deployment plan was based on /64 subnets. yes, thats a ridiculous amount of hosts per s

Re: [c-nsp] [cisco-nsp] [OOT] Getting help to get the network acceptable

Hi, > Hi, > My company recently bought 202[dot]90[dot]194[dot]0/23 IPs, and since we > start using this IPs, I can't access several site on the net. When check > through robtex.com, a company in India seem to still include these IPs into > their RADB database. I can't email them, browse their si

Re: [c-nsp] sup720 / 6704 RELIABILITY DRIVER / weird ASIC msg

Hi, > The first thing TACS will tell you is upgrade your IOS version. > SXF2 is ancient and buggy. aye. and SXH3 is new and buggy 8-) alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archiv

[c-nsp] securely sending a trunk link

hi, just a qucik question to see if theres some simple option. For operational reasons we have to send a trunk link down to a customer location...in this case we are wary (as they may move..with the kit that was at the other end..and someone else will connect to the link and get themselves a nice

Re: [c-nsp] Etherchannel Load Balancing

Hi, > We are doing etherchanel between two a Cisco catalyst 4509 switchs but load > balancing is not working On the one link we have about 700M and on the other > 60M. The configured load balancing method is the default which is > (src-dst-ip). > the method you need to use to get proper/ef

Re: [c-nsp] SCP bug in SXH3 i.e. CSCsr86489

Hi, > Just FYI, the above bug (a "catastrophic" sup-crasher in SXH3) is not > fixed in SXH3a. yup. SXH4 in mid november was the last whispers I heard alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listi

Re: [c-nsp] SXF15/SXF15a experiences?

Hi, > That was not what we had running and tested elsewhere. There are no ah, fair enough. the 'run with it,and if no problems or features required,stay with it' approach is a fine way of operating imho :-) alan ___ cisco-nsp mailing list cisco-nsp@

Re: [c-nsp] SXF15/SXF15a experiences?

Hi, > We've actually been very stable on SXF10 for a while now (over 1 year on > our busiest box). any reason you're not using SXF12a - the safeharbor release? we've had to upgrade a box to SXF15 to 'fix' a bug in SXF9..so I'll see what happens to that box.. alan _

Re: [c-nsp] SXF15/SXF15a experiences?

Hi, > We're actually quite happy with SXH3a. SXH3 is evil (BGP ghost). so far...(touch wood) our 2 SXH3a boxes have been quite happy. > I haven't tested anything on SXF more recent than SXF13a, and that is > working quite well for us as well. There have been reports about crashes > and BGP fu

Re: [c-nsp] Alternatives to Cisco's TACACS server?

Hi, > The fork based on Cisco's code over at shrubbery has worked out well for me. > > > http://www.shrubbery.net/tac_plus/ agreed. also note, theres been hints of TACACS+ being part of future FreeRADIUS capability for some time too. alan ___ cisco-n

Re: [c-nsp] New IPv6 BGP peer on a pure IPv4 network

Hi, > so - you need (nice list of tasks to be undertaken deleted) - and update all your ACLs etc to account for any SNMP/telnet/ssh/etc that might be getting to your router via IPv6 As Gert says, IPv6 work is just like IPv4 work except for the more funky addresses - oh, and the fact that IPv6

Re: [c-nsp] SXI out

Hi, > Just to add a data point to this. So far, our test SXI box (semi-production, > not "only lab") has been exceedingly well-behaved - IPv4, IPv6, BGP, EIGRP, > OSPFv3, MPLS, SNMP "just works". > > Non-modular, though. I didn't have time to test modular yet ("soon!"). same story here - non m

Re: [c-nsp] SXH4 Applying VLAN changes may take few minutes

hi, maybe just covering themselves? The worst I've seen was a few seconds - thats with just over 120 VLANs on a VTP domain with 3 masters alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] Etherchannel port across SUP and line card

Hi, ou are trying to run an etherchannel across 2 different cards - they have different capabilities - the etherchannel needs to be constructed using similar interfaces - which you've now done by turning the QoS stuff off. using the same blade would 'fix' things (but remove resiliency) buying a ca

Re: [c-nsp] temporary static routes

Hi, > Looks like IOS doesn't support eem for my platform let alone my IOS > version. Additionally, kron looks to be what I wanted, save that it can > only use privileged mode commands, no global or interface commands, which > seems to be a show stopper for injecting null0 routes. can you not

Re: [c-nsp] IOS reliability

hi, there can be the occasional bug or glitch - mainly (in our experience) due to new types of traffic on the network. our main downtimes are due to power outage (in excess of our UPS 6hr capability) and firmware updates. however, you can help to negate any IOS issue by eg using dual supervisors

Re: [c-nsp] Max number of users on Aironet 1252AG

hi, around 30 users per wifi channel on the AP - eg 30 on 802.11a, 30 on 802.11b/g is the reasonable value per AP - thats for 1242, 1131, 1252 etc. the wireless controller doesnt have a limit as such for number of users - especially if you DONT use it as the captive portal etc and just use it to

Re: [c-nsp] Per packet load balancing with low latency applications

Hi, > Yes, age old question. > > Use layer 2 technologies such as MLPPP. yep - you caan then choose the appropriate load balancing method so media streams for the same target go down them same pipe. missing packets are generally okay for most modern streaming systems...they ignore them..you might

Re: [c-nsp] Not Allowing Vlan 1 on trunk ports

Hi, > interface GigabitEthernet0/14 > switchport trunk encapsulation dot1q > switchport mode trunk > switchport trunk allowed vlan 2,10,200-300 > > switchport access vlan X > switchport trunk native vlan X > switchport nonegotiate you cant have a 'switchport access' and

Re: [c-nsp] network connection tool

Hi, > i want to know if there any network connectivity tool can be configured to > respond to spesific TCP/UDP port number ? a selection of small tools and utils. eg 'lighttpd' for TCP - just change the port its listening on and web browse to a file on it, 'netcat', 'tftpd' for UDP randomness. h

Re: [c-nsp] Cisco licensing

Hi, > This refers to: Replacing one release with another without upgrading the > feature set. Update to fix a bug or to replace a release that is no longer > supported. Updates are free of charge." > > So reading the above, it would appear that I can update all of my Cisco > devices to whateve

  1   2   3   >